MAL-2025-166655 Malicious code in t-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e11e66fe284c711eb287567cf0d80a6b5ac9783fbec275c9c641319fe1c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152743 Malicious code in arif-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abbae48b7afede2b605bd36bd490635b9775b3440b588d36c31cfc9bdcf91f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166668 Malicious code in tadasdhi-nil-tesru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12be63015242c32ec1218c3ee912bd80186e22e86b20b921982c9f3c70164c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156738 Malicious code in inufi-gobai-jagiagair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 379c29ea7f2f96444e833420678e3df691db3d7c8324d288c26dd6020bc6a7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152713 Malicious code in angin-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674b68aa832686c0581b80cb23c8419f14025a93902302eda3e23a6712e5619f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167100 Malicious code in teagood-manaki35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6a703ddb897d3504520c19d78729d9346815b7971ecf1e58f691359ddb4641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165136 Malicious code in riyanto-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438df45741530ebb5b86303324ab2acf75dcf29e75bec08dcd5983c439ef3e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152633 Malicious code in analusia-akfai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fee430d6e83ee61f2a7a29443dccca1b72252c907748a63256b1dabf2511b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166368 Malicious code in sunden-udik-vaklkanmumba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa534bfed18769d79b44d031faf542f73ad2e35d708b0de0e8078be8d0740c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166034 Malicious code in slamet-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce65c259ecb2d3e62a03360ffbc239cb14a407130a573e98096a3621259e9325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158897 Malicious code in lookingan-namalaka81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f248572ae7a8645fdc2f791cf7746be03a880f1ce57cd1a60dd7697883bcbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162655 Malicious code in nokire-kilua63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52061643fc724aaa60a852b76dfcd4d3c1b9f596a52f7f3458286e8faac1e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167806 Malicious code in teagood-sukuna51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20aab0a8dc190864f350392b11715e4784a80c72326443319dc94531fcf4c8a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152500 Malicious code in alvira-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb601da993146c49bb4177bfc6aa0ac295a3b1ac1d0f444858f442696b4f34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161257 Malicious code in nabila-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50493c6845e30612eb89b3679d7cf3921e552e4b3a121c37695750c9943e6fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151989 Malicious code in aibuna-mobiuple-amakora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1b35deca1f30e9b278b05b52b1c7c7e182dc735b3ea3ef967cbd4f16980a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154740 Malicious code in dioalgo-klop-kalobaksi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90ab3ce572da7a17da97f425f4c591f97f75661530a076b2e0b001a1b02d39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-registry-sedna-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43426488caa65ceaf277ae33df4839e7ebc26fd723dca2280a380133248433ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-markdown-antares-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bea403516c121724c9d4a28b3fa6454abe86afda0da76546d5615ec9e091d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-playwright-zenobia-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c79d7663c95b031b90b984412a77e6cb307fbbbfbd3f9cb51a1ef7206d484b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...